Data Privacy Notice

PURPOSE OF THE DATA PRIVACY NOTICE

We take your privacy very seriously and we ask that you read this Data Privacy Notice carefully as it contains important information on the personal data we collect about you, what we do with your data and with whom your data might be shared.

SCOPE AND AMENDMENT OF THE DATA PRIVACY NOTICE

This Data Privacy Notice applies to all companies of the Lalique Group, which means for Lalique Group SA and all of its subsidiaries and their employees. An overview of the Lalique Group can be found under https://lalique-group.com/corporate-governance.

The Data Privacy Notice covers all processing of personal data when you either visit one of our official websites or establish and maintain a business relationship with us. This includes data processing by Lalique Group companies in the following situations:

• communication with Lalique Group companies;
• using websites operated by Lalique Group companies, including microsites and campaign landing pages (“websites”);
• using apps made available by Lalique Group companies (“apps”);
• shopping in online shops operated by Lalique Group companies (“online shop”) or (in-store) in our boutiques;
• using our social media company pages;
• using our newsletter;
• taking part in customer events, promotions or sweepstakes;
• information about current developments at Lalique Group companies and about new products.

Our Data Privacy Notice does not apply to your activities on the websites of third parties e.g. social networks or other providers, which you can reach via the links on our websites. Please inform yourself on the websites of these providers about their Data Privacy Notice.

We may occasionally make changes to this Data Privacy Notice or update it. You should review this Data Privacy Notice before you provide us with your personal data, and occasionally verify that you are aware of the most recent version of any access you may make to this website or the purchase of our products.

CONTROLLER AND REPRESENTATIVE

Generally, Lalique Groupe SA, Grubenstrasse 18, 8045 Zurich, Switzerland) is the controller in relation to the processing of personal data described in this Privacy Notice. However, if you establish and maintain a business relationship with a Lalique group company other than Lalique Group SA, the relevant Lalique Group company that referred you to this Privacy Notice will be the controller in relation to such data processing.

For the purpose of the General Data Protection Regulation (“GDPR”) in the European Union, Lalique Group SA has appointed the following entity as its legal representative: Lalique SA, having its registered office at 30, rue de Prony, 75017 Paris, France.

You can contact our Data Protection Organization as follows: personaldata@lalique-group.com.

WHAT DATA DO WE COLLECT AND FOR WHAT PURPOSE DO WE USE IT?

We collect personal data about you for purposes corresponding to the activities and situations listed above (scope). In particular, this includes one or more of the following purposes:

Visiting our websites or using our apps
When you visit one of our official websites or use our apps, we collect and process automatically certain user-related data such as information regarding your browser, operating system, or your IP address, the website pages you visit, the amount of time you spend on the pages, the page which has referred you to our page and the links on our websites or in our apps you select. We process the above data to ensure a smooth connection setup and user-friendly application of our websites and apps, to guarantee network and information security and to analyze system security and stability.

Using the contact forms
If you use our contact forms made available on our websites for submitting an enquiry or getting in contact with us for other reasons, we will process the data you have provided to us (such as your name, address, email address and telephone number, etc.) to handle your enquiry and to get in contact with you, if necessary.

Establishing and maintaining business relationships; shopping in boutiques and online
We collect and process personal data of customers, partners, and others for the preparation or execution of a contract if you purchase or intend to purchase products or services from us. Specifically, we will collect general personal data (e.g., name, contact or delivery address, and supplementary registration data), your shopping data (e.g., products placed in your online shopping basket, prices of the chosen products or services, details about your inquiries placed in boutiques, or preferred payment or delivery method). You provide most of this personal data yourself (e.g., in the registration process or when shopping). Further data (e.g., information on your preferred products) we collect automatically based on your use of our online shops, and your order and purchasing decisions.

We will use this personal data in the registration process to confirm your opening of an account, to identify you and manage your account (e.g., account or customer number), to process your orders, to send you order confirmations, to deliver an ordered product or service, to provide our customer service, to send a notice of payment, satisfactory survey and any other relevant information to establish, fulfill and maintain our business relationships with you. In addition, we will use this personal data for marketing purposes, as set out below.

Marketing, personalized offers, email communication, newsletters
Within the existing business relationship between you and us we process your personal data to inform you about our products and services. In order to personalize your shopping experience, to tailor our marketing activities to the recognizable interests of our customers, and (based on your assignment to relevant customer segments) to display or send you personalized offers and promotions, we analyze your use of the online shop and combine this data with personal data provided or collected when shopping in our boutiques, as well as with app usage data.

We will contact you by email to the extent allowed by applicable law, or if you have provided your consent, using your name, address, email address, your interest and your previous purchase activities. You may unsubscribe from these emails at any time.

Email marketing campaigns published by us may contain tracking facilities within the actual email. Subscribed activity is tracked and stored in a database for future analysis and evaluation. Such tracked activity may include: the opening of emails, forwarding of emails, the clicking of links within the email consent, times, dates, interests and frequency of activity (this list is not comprehensive).

Customer events, promotions and sweepstakes
If you register to take part in customer events, promotions or sweepstakes (e.g. via our microsites or campaign landing pages), we or our external service providers will collect your registration data (in particular, name and contact details) as well as your feedback on events or received samples. We will supplement this data with information on the relevant event, promotion or sweepstake, and combine it with information on your interaction with microsites on which we inform on the relevant event, promotion or sweepstake.

We process this personal data in order to confirm your registration, organize the event, promotion or sweepstake, manage your participation, and to notify winners. In addition, we will use the personal data in order to engage in co-creation activities, improve existing products and develop new ones, introduce you to the brand and promote new products and services, tailor our marketing activities to the recognizable interests of our customers (personalized advertising), provide you with personalized offers and promotions, and to measure the effectiveness of these marketing activities. Please note that collecting contact information for direct marketing purposes is a key purpose of our promotions and sweepstakes. If you register for a promotion or sweepstake, you consent to receiving emails from the Lalique Group for marketing purposes in the future. You may unsubscribe from these emails at any time. Please see the information provided on relevant microsites and in direct marketing emails for further information.

Social networks and embedded content
On our company pages in social media (currently, Instagram, facebook, Pinterest, YouTube, X, TikTok, and LinkedIn) you will find posts about current developments at Lalique as well as our range of services. The social media providers collect and analyze usage data such as the number of visitors and demo-graphic information about the visitors to our social media pages. We receive evaluations from the social media providers based on this data. These contain only aggregated or otherwise sufficiently anonymized data. Only the respective provider can identify you based on the usage data collected. Therefore, please observe the data protection information of the respective provider.

We integrate content on the websites using resources from external servers (videos from YouTube and maps from Google Maps). When retrieving these resources, the provider of the external servers learns your IP address and/or certain traffic data, which are necessary for the use of the servers of the external service providers.

Web analytics and advertising technologies
We use web analysis services (currently Google Analytics) to evaluate the use of the websites and to obtain information for its optimization. The web analytics services we use collect and store user data using cookies. Before they are transmitted to a server outside Switzerland/EU/EEA, the requesting IP addresses are shortened.

We use advertising technologies from Google (Google Ads) and other providers on the websites. This allows us to target users of our websites with advertising that is relevant to them when they visit other websites (retargeting), and to analyze the success of such advertising campaigns (e.g., reach or impression measurement). The advertising materials are displayed on the websites you visit based on an analysis of your previous use of our websites. For this purpose, the providers of the advertising technologies set cookies when you visit our websites.

If you interact with the cookie preferences tool implemented on the websites, you will find out more about our use of these services and technologies and about your choices in this regard

Cookies and similar technologies
We use cookies, tags, and similar technologies on the websites. Cookies are text files that are downloaded to your computer or mobile device when you visit a website or use an app. Some of the cookies we use are necessary to provide certain functions or content on the websites (e.g. to facilitate your use of the online shop or the integration of video or map functions.) In addition, we use cookies to enable the use of web analytics as well as advertising technologies.

If you interact with our cookie preferences tool on the websites, you will find out more about the cookies used on the specific website you visit, the purposes for which we use them, and your choices in relation to them.

LEGAL BASIS FOR PROCESSING PERSONAL DATA

Insofar as you have given us consent to the processing of your personal data, this constitutes the legal basis for the processing. You can withdraw your consent or unsubscribe at any time by contacting us as outlined above.

For processing of personal data for the purpose of initiating or performing a contract with you, this constitutes the legal basis for the processing.
Insofar as the processing of your personal data is necessary in order to fulfill our legal obligations (for example to store data), we are entitled to do so under applicable law, and this constitutes the legal basis for the processing.

In addition, we process personal data for the purpose of exercising our legitimate interests and legitimate interests of third parties. Maintaining the functionality of our IT systems, but also the personalization of your shopping experience, improvement of existing products and the development of new ones, analysis of your use and optimization of our websites and apps, the marketing of our own and third-party products and services (including personalized advertising and offers, and organizing promotions and sweepstakes as outlined above) and the legally required documentation of business contacts are such legitimate interests.

WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?

To the extent allowed by applicable law we may send information about you to other parties, other companies within our group, our agents, associates and service providers and law enforcement agencies in connection with any investigation to help prevent unlawful activity.

Our websites may also contain offers from third parties. If you click on such offers, we will transfer data to the respective provider to the required extent (e.g. the indication that you have found this offer with us and, if necessary, further information that you have already indicated on our website).

TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

By principle, we do not send your data to third parties outside the EU/EEA or Switzerland.

However, due to the international activities of Lalique and in order to optimize the quality of service, the information referred to above are likely to involve transfers of personal data outside your country and / or to countries that are not members of the European Economic Area, whose personal data protection laws differ from those of the European Union and Switzerland.

In particular, your data may be transferred to and processed by companies of the Lalique Group, which are located in the following countries: Switzerland, France, Germany, Great Britain, United States of America, China, Hong Kong, Singapore and Japan. Please note that only selected employees of the Lalique Group companies who have received appropriate training have access to customer personal data. We may also use service providers worldwide and process personal data worldwide.

In the case of the transfer of personal data to countries outside the EEA, whose personal data protection laws differ from those of the EU and Switzerland, Lalique shall apply rigorous and appropriate physical, organizational and technical measures/procedures to ensure the security and confidentiality of personal data in compliance with the applicable laws such as the General Data Protection Regulation and ensure that the special statutory conditions under art. 44 et seq. GDPR (or similar provisions under other data protection laws that may apply) are fulfilled. Particularly, in such a case, Lalique implements safeguards (e.g. such as the EU Standard Contractual Clauses with a prior risk assessment).

Lalique also transfers personal data to countries without the same level of data protection if the data subject has explicitly consented to such transfer and/or if such a transfer is necessary to fulfil a contract with the person(s) concerned, to fulfil a contract in the interest of the person(s) concerned or to exercise or defend legal claims.

KEEPING YOUR DATA SECURE

Our staff is bound by obligations of confidentiality and trained in the protection of personal data. We will take all reasonable steps to comply with the legislation and use the appropriate technical and organizational measures necessary to safeguard your personal data.

While we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that is transferred from you or to you via the internet. If you have any particular concerns about your information, please contact us (see section 3 Controller and Representative).

RETENTION PERIODS

We process your personal data only for as long as it is required:

• to make products and services available to you;
• to comply with statutory obligations to retain personal data, resulting from applicable finance, tax or commercial laws;
• to fulfill our legitimate interests as further described in this Data Privacy Notice, unless you object our use of your personal data for these purposes (e.g., the recognizable duration of your continued interest in our promotions);
• until you revoke your consent you previously granted to us (processing as long as you remain subscribed). For further information, see below under section "Your rights".
  We may retain your personal data for additional periods if necessary for compliance with legal obligations or if we need the personal data to assert or defend ourselves against legal claims. In such case we will retain your personal data until the end of the relevant retention period or until the claims in question have been settled or expired.

YOUR RIGHTS

As a person affected by data processing, you have the right (subject to conditions and exceptions) to information, correction, data deletion, limitation of processing and data portability.

If you have consented to the processing of your personal data by us, you have the right to revoke your consent at any time. The legality of the processing of your personal data until a revocation is not affected by the revocation. Likewise, the further processing of these data on the basis of another legal basis, such as the fulfillment of legal obligations (see section “Legal Basis of Processing”), remains unaffected.

Right of objection: You have the right (subject to conditions and exceptions) at any time, for reasons arising from your particular situation, to prevent the processing of personal data concerning you. If you object, please note that we may continue processing your personal data if we have compelling legitimate reasons that outweigh your interests, rights and freedoms, if the processing is necessary for the fulfillment of legal obligations or for the assertion, exercise or defense of legal claims.

If you believe that the processing of your personal data violates legal requirements, you have the right to complain to a competent data protection supervisory authority.

ANNEX - Lalique Group

An overview of the company structure with all associated companies can be viewed at any time under the following link: http://lalique-group.com/corporate-governance

This overview could be adjusted from time to time to reflect the current changes in the company structure. The status as of August 31, 2023 is as follows: